added the create and destroy method to the session controller